Priority LOW 30
A missing validation of a user-controlled value in the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an adjacent network attacker to tampe…
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00673 · Published 2026-01-29 · Fixed in 26.1 CWE-20
Priority LOW 33
An out-of-bounds read vulnerability in the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows a remote attacker to leak stack memory and cause…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00381 · Published 2026-01-29 · Fixed in 26.1 CWE-125
Priority LOW 35
An out-of-bounds read vulnerability in the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to cause info…
CVSS 3.1HIGH 8.1· Adjacent network · No auth · No interaction · EPSS 0.00219 · Published 2026-01-29 · Fixed in 26.1 CWE-125
Priority LOW 29
An integer underflow in the UDP command handler of the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an adjacent network attacker to trigg…
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00352 · Published 2026-01-29 · Fixed in 26.1 CWE-122
Priority LOW 28
A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to inject, tamper with, or forge log…
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00163 · Published 2026-01-29 · Fixed in 26.1 CWE-20
Priority LOW 28
A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to cause the NomadBranch.exe process…
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00188 · Published 2026-01-29 · Fixed in 26.1 CWE-476
Priority LOW 28
A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to cause normally encrypted UDP traff…
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00129 · Published 2026-01-29 · Fixed in 26.1 CWE-319
Priority LOW 33
A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Nomad-RunPkgStatusRequest instruction.
CVSS 3.1MEDIUM 6.8· Network · High privileges · User interaction · EPSS 0.00759 · Published 2026-01-29 · No fix listed CWE-20
Priority LOW 31
Improper Link Resolution Before File Access (invoked by 1E‑Explorer‑TachyonCore‑DeleteFileByPath instruction) in TeamViewer DEX - 1E Client before version 26.1 on Windows allows a low‑privileged local attacker to delete…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00233 · Published 2026-01-29 · Fixed in 26.1 CWE-59
Priority LOW 31
A privilege escalation vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Exchange-NomadClientHealth-ConfigureGeneralSetting instruction prior V3.4.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00166 · Published 2025-12-11 · Fixed in 3.4 CWE-427
Priority LOW 31
A privilege escalation vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Nomad-SetWorkRate instruction prior V17.1.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00184 · Published 2025-12-11 · Fixed in 17.1 CWE-427
Priority LOW 35
A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-ConfigMgrConsoleExtensions instructions.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00872 · Published 2025-12-11 · Fixed in 29, 30 CWE-20
Priority LOW 35
A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Nomad-PauseNomadJobQueue instruction prior V25.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00872 · Published 2025-12-11 · Fixed in 25 CWE-20
Priority LOW 35
A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-PatchInsights-Deploy instruction prior V15.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00872 · Published 2025-12-11 · Fixed in 15 CWE-20
Priority LOW 35
A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Explorer-TachyonCore-LogoffUser instruction prior V21.1.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00828 · Published 2025-12-11 · Fixed in 21.1 CWE-20
Priority LOW 36
A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Explorer-TachyonCore-FindFileBySizeAndHash instruction prior V21.1.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.011 · Published 2025-12-11 · Fixed in 21.1 CWE-20
Priority LOW 36
A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Nomad-GetCmContentLocations instruction prior V19.2.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01161 · Published 2025-12-11 · Fixed in 19.2 CWE-20
Priority LOW 36
A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Explorer-TachyonCore-CheckSimpleIoC instruction.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01161 · Published 2025-12-11 · No fix listed CWE-20
Priority LOW 36
A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Explorer-TachyonCore-DevicesListeningOnAPort instruction prior V21.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01189 · Published 2025-12-11 · Fixed in 21 CWE-20
Priority LOW 28
A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to coerce the service into transmitting data to an arbi…
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00204 · Published 2025-12-11 · Fixed in 25.11.0.29 CWE-20
Priority MEDIUM 46
A vulnerability in TeamViewer DEX Client (former 1E client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to bypass file integrity validation via a crafted reque…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00301 · Published 2025-12-11 · Fixed in 25.11.0.29 CWE-20
Priority LOW 34
A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to cause a denial of service (application crash) via a…
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00213 · Published 2025-12-11 · Fixed in 25.11.0.29 CWE-20